BASIC question, but still having conceptual issues

[Alan DeKok]

Gary Gatten wrote:
> I have several different type's of clients/NAS's that will be using FR
> as the Front End to perform AAA - mostly Authentication, but the Author
> and Acct are close behind.

  Use virtual servers.  See raddb/sites-available/README

> Anyway, each of these clients need to perform slightly different backend
> queries to determine if Authenticate should pass or fail:
>
> So, how do I go about this?

  Configure completely different virtual servers, even if the contents
of those servers are mostly the same.

  This lets you work like each type of NAS has it's own RADIUS server,
with it's own policies.

>  I'm currently using NTLM_Auth and that's
> all working fine, I'm just not sure how to say in FR config: if request
> of type 1, run this NTLM_Auth command and check for this group; If
> request of type 2 run this other NTLM_Auth command and check for this
> other group.

  You'll also need to configure different instances of the MSCHAP
module, too.

  Alan DeKok.